Unofficial archive. This is a read-only, community-run archive of the Apple Support Community. It is not affiliated with or endorsed by Apple Inc.

Aegis Human Verification

Hello..

I need help with a possible security issue on my MacBook.

I visited a website that displayed an “Aegis Human Verification” page and instructed me to open Terminal, paste a command, and press Return. I followed the instructions, and the command appeared to run. After that, a separate window asked for my Mac administrator password, which I entered. Then several permission requests appeared, and I denied all of them.

After this incident, I noticed an item called “bash” under System Settings → General → Login Items & Extensions → Allow in the Background, labeled “Item from unidentified developer.” I had never used Terminal before this incident.

I have since disabled the background permission for bash and disconnected my MacBook from Wi-Fi. I am concerned that the command may have installed malware or made unauthorized changes to my system.

Could you please advise me on how to safely inspect and secure my MacBook remotely? I am currently unable to bring it to a service center.

Thank you.

1 reply

Not a “possible security issue”, but rather a catastrophic security breach seemingly with some variation of ClickFix.


Reset your Mac, restore your most recent backup from prior to the breach, and change all of your passwords and passkeys, and watch all your payment cards.


While your Mac is reloading from backup…


If you don’t have two-factor authentication enabled on your Apple Account, go enable that now.


Also change your Apple Account password, and anything else of highest privacy a d highest financial importance.